Guillaume Caillé

Senior Director - Penetration Testing

[ARMIRA @ARMIRA2832741]

🚀 Lancement d'Armira Pro le 7 novembre 2024 ! 🎉 Redéfinissez la sécurité des données avec : ✅ Accès sécurisé ✅ Gestion simplifiée des utilisateurs ✅ Alertes en temps réel ✅ Visualisation intuitive ✅ Intégration avec OneDrive. Restez connectés pour plus d'infos ! 💡🔒

[Guillaume Caillé @OffenseTeacher]

@chvancooten Very interesting! :)
Thanks for sharing!

[Guillaume Caillé @OffenseTeacher]

@ShitSecure Haha, sorry😇. Now you have time to do a more interesting one!

[Guillaume Caillé @OffenseTeacher]

Just published my methodology for finding good DLL side-loading candidates while avoiding using DllMain for injection to bypass Loader Lock limitations.
If you have been struggling with this, I hope this saves you time in the future.
https://t.co/Sn58no2C1v

[Guillaume Caillé @OffenseTeacher]

@chvancooten @lapinousexy This is treason!

[Guillaume Caillé @OffenseTeacher]

@barberousse_bin @NorthSec_io Sounds interesting! :) will be there

[Étienne Ducharme @b13bs_]

How's your M365 password spraying game in 2024 ?
On my side, it's harder than ever.

For instance, after 6 rounds each 6 hours apart, starting to lock out accounts more and more each round, to the point where impact is noticeable.

Rounds performed using the great #TeamFiltration

[Guillaume Caillé @OffenseTeacher]

@Tr0llyTr0llFace @wartranslated Wow that made me laugh :p. Thank you.

[Guillaume Caillé @OffenseTeacher]

@embee_research I really appreciate your posts on Ghidra. Thanks for publishing these!

[Guillaume Caillé @OffenseTeacher]

@R0h1rr1m Nice!
Thanks for sharing

[TrustedSec @TrustedSec]

With initial access to a M365 account, Red Teamers can potentially find a treasure trove of sensitive information. @Flangvik goes over three tools (and one script) that he believes to be the modern-day Triforce for initial access. Read it now on our blog! https://t.co/QpTcFaLtst

[Guillaume Caillé @OffenseTeacher]

@byt3bl33d3r @HackingLZ @GuhnooPlusLinux @MJHallenbeck We will definitely be paying for it as we have been

[Guillaume Caillé @OffenseTeacher]

@AnubisOnSec @M_haggis @tastypepperoni I thought backstab's driver could not get installed anymore after the last driver blacklist update. I am wrong?

[Guillaume Caillé @OffenseTeacher]

@R0h1rr1m @JulioUrena So nice!
Will definitely be using it :)

[Furkan Göksel @R0h1rr1m]

I developed a Fileless Lateral Movement tool called NimExec. It changes service configuration to execute the payload via manually crafted RPC packets. It's the improved version of @JulioUrena 's SharpNoPSExec with Pass the Hash support. Enjoy!

#infosec
https://t.co/G6xeyHVmnf

[Guillaume Caillé @OffenseTeacher]

@b13bs_ @_RastaMouse

[Guillaume Caillé @OffenseTeacher]

Here is a small POC for doing steganography with Nim-Lang. Useful for reducing payload entropy on disk or giving you a remote Killswitch.
https://t.co/fEZg7vl1tf

[Guillaume Caillé @OffenseTeacher]

@424f424f @HackingLZ You're not alone !

[Guillaume Caillé @OffenseTeacher]

@NinjaParanoid @RemindMe_OfThis in 24 hours

[Guillaume Caillé @OffenseTeacher]

@kyleavery Nice !!